All of the above-reported domains are currently using a virtually identical template for their websites, and the same webpages are also being served directly by the above-reported IP addresses. The same webpages are served directly from the IP addresses in the domains A records which currently include
-

54.39.41.128 (loyalpermissiondude.xyz)

142.44.213.87 (creeddeskenth.xyz)

144.217.79.135 (ordercotton.xyz)

See the screenshot at hxxp://urlquery.net/report/e05803cc-ffe1-486f-bd76-11f79bd4c2bf

The "dummy" website template used by the above-reported domains is in wide-spread use. It isn't confined to OVH Canada. E.g., it is also used by the server for milancondera.xyz hosted at IP 80.211.129.229 on the Aruba S.p.A. network. Nor is the template confined to .XYZ top-level domains. E.g., it is also used by the server for chanelw.com hosted at IP 200.63.45.49 Panamaserver.com network.

A Google search using as a keyword the phrase "optimization of the campaign is key" will return scores of virtually identical websites. However, I have no information about any malicious aspects of such domains.

@ Fred Nurk, I posted this for your use today.
https://forum.mywot.com /viewtopic.php?f=3&t=3136&p=263687#p263687 (there's an intentional break-space in the link due to an error in the forum formatting)

There are also malware URL, etc reporting sites and addresses to antivirus venders, that I have in my offline notes, that I haven't used much.

Appears to have started up again - several e-mails in the last few hours, all headed "Home Warranty". All contain a redirection link which leads to
http://zffzz.yzscwdbdxe.oyfhf.site/?sov ... c26be3c49e

Which redirects to an online gaming site - https://www.freelotto.com/register.asp? ... yoneWinsTV

Most recent spamming domain is waaowdeals.com which is registered via Name.com to

Who is online

* Please note that Facebook & Google+ logins are no longer supported on the forum. If you previously had your login set up as one of these options - please use the "I forgot my password" link above in order to set up a password for your account. We apologize for the inconvenience.